Beta draft — not legal advice
Privacy Policy
Describes how SellFlow handles data for the Nigeria beta. Update with counsel before general availability / Meta App Review.
1. Data we process
Account data (name, email, password hash), business/store settings, product catalogues, customer contact details you collect (including WhatsApp numbers), order and payment metadata (via Korapay), ads connection tokens (encrypted), and usage logs needed to run the service.
2. Why we process it
To provide checkout, messaging, analytics, support, fraud prevention, and platform operations. We do not sell personal data.
3. Processors
Infrastructure and integrations may include Postgres hosting, Redis, Korapay, Meta (WhatsApp/Ads), other ad networks you connect, OpenAI (if AI is enabled), and email delivery (Resend) for account emails.
4. Retention & security
We retain data while your account is active and as needed for legal and ledger records. Access is restricted by role; passwords are hashed; sensitive tokens are encrypted at rest where implemented.
5. Your rights
Merchants may request access or deletion of account data subject to legal retention (e.g. payment ledgers). Buyers should contact the merchant store for order-related requests; SellFlow may assist platform-level issues.
6. Contact
Privacy questions: privacy@sellflow.local.